![]() |
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
MS-Defcon 2 – Get ready to pause for Dec
Home › Forums › AskWoody blog › MS-Defcon 2 – Get ready to pause for Dec
- This topic has 20 replies, 10 voices, and was last updated 1 month ago.
Viewing 5 reply threads-
AuthorPosts
-
-
December 1, 2020 at 7:12 am #2316314
Susan Bradley
ManagerIt’s time to put the pause (or defer) for your updates. It’s the first Tuesday of the month and non security Office updates are out – PK has them lis
[See the full post at: MS-Defcon 2 – Get ready to pause for Dec]Susan Bradley Patch Lady
-
December 1, 2020 at 10:44 pm #2316408
Morty
AskWoody Lounger-
December 2, 2020 at 12:48 am #2316439
Alex5723
AskWoody PlusYou can download any updates from Microsoft Catalog manually.
1 user thanked author for this post.
-
December 2, 2020 at 1:12 am #2316449
-
December 2, 2020 at 2:09 am #2316470
RDRguy
AskWoody Lounger@Morty …
To find all November 2020 Windows updates in the Microsoft Update Catalog, search for “2020-11” (no quotes). You’ll have to scroll thru several pages and pick only the ones applicable to your Windows version & bitness (x86 or x64).
For Windows & MSOffice updates, you can still get November’s via Windows Update (WU) up to & even after MS has released the December updates.
First run WU. After WU finds all outstanding updates, highlight (click on) each found update and verify that it’s release date (in description area on left) is prior to Dec 2020. If any are dated Dec 2020 (or later), first uncheck then hide these updates.
Once all updates dated Dec 2020 (or later) have been hidden, run WU again. This time WU will find & display the outstanding November 2020 (or prior) updates that were superseded by the hidden Dec 2020 updates.
After all your Nov 2020 (or prior) updates are successfully installed and system’s been rebooted, if you hid any Dec 2020 updates, run WU again and restore these hidden Dec 2020 updates so they can be found again when it’s time to install these later on (when we’re out of MS-DEFCON 2 for the Dec 2020 updates). You can safely exit out of WU without installing any of the re-found Dec 2020 updates.
Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS1 user thanked author for this post.
-
-
-
-
December 2, 2020 at 1:13 am #2316451
Paul T
AskWoody MVP-
December 2, 2020 at 1:17 am #2316452
-
-
December 2, 2020 at 1:19 am #2316454
Paul T
AskWoody MVPThe Author’s site is: https://github.com/DavidXanatos/wumgr/releases
cheers, Paul
1 user thanked author for this post.
-
December 4, 2020 at 12:07 am #2317025
snalmond
AskWoody PlusI’m confused. I thought Patch Tuesday was the 2nd Tuesday of the month. Since the first Tuesday was Dec. 1, the second Tuesday can’t be before Dec 8. Why DEFCON 2 now? Historically, I’ve waited until just a few days before Patch Tuesday to install Windows updates. What am I missing?
2 users thanked author for this post.
-
December 4, 2020 at 12:09 am #2317031
-
December 4, 2020 at 12:58 am #2317034
anonymous
Guest-
December 4, 2020 at 5:22 am #2317074
PKCano
ManagerNovember patches had the DEFCON-4 rating to go ahead and patch.
The Office non-Security patches are December updates under the December DEFCON-2 rating, not to be installed yet.
They are NOT included in the November DEFCON-4 patching (as started in the release announcement post).The DEFCON System applies to the updates.
November updates were classified under DEFCON-4. That means they are now OK to install ANY TIME.
The DEFCON-2 rating is now aimed at the December patches in order to discourage patching before the Dec patches are vetted.It doesn’t mean you can’t install previous patches that have already been vetted and given the DEFCON-4 rating.
-
December 4, 2020 at 8:53 am #2317108
TonyC
AskWoody LoungerThis is a subtlety that has not been explained before as far as I am aware, or there has been a policy change. Before Woody retired, he would normally have called time on patching (i.e. set MS-DEFCON 2) around the eve of patch Tuesday, the second Tuesday of the month. And non-security Office patches were around then, weren’t they?
1 user thanked author for this post.
-
December 4, 2020 at 9:25 am #2317114
PKCano
ManagerNothing has changed – it’s always been that way.
I have explained this quite a few times.
If a patch has been approved for installing, that approval is not revoked just because the next month’s patches have not been vetted and approved.DEFCON is meant to protect you from new, unvetted patches, not limit when you can install patches that have already been through the DEFCON-approval process and OKed for install. DEFCON assumes you install the approved patches during the DEFCON 3-5 window. But if you fall behind and miss the window, it doesn’t prevent you from catching up with the approved updates. Just don’t install the ones that haven’t been approved through the DEFCON System.
-
December 5, 2020 at 4:25 am #2317254
TonyC
AskWoody LoungerI understand completely what you are stating and, with one exception, I agree with everything. The one exception is your first sentence.
If, from now on, we can expect MS-DEFCON to be set back to 2 on the eve of the first Tuesday of the month, instead of on the eve of the second Tuesday of the month, that to me is a change in policy.
I am thankful to @snalmond for raising the issue because I was contemplating doing it. However, at a personal level, it makes no difference to me. My version of Office is CTR and so I don’t get my Office updates through Windows Update. Unless there are exceptional circumstances, I shall continue to wait until nearer Patch Tuesday before applying my system updates.
-
This reply was modified 1 month, 3 weeks ago by
TonyC.
1 user thanked author for this post.
-
This reply was modified 1 month, 3 weeks ago by
-
December 5, 2020 at 5:08 am #2317258
PKCano
ManagerThe DEFCON change has never been a set day. It has always been contingent on a condition – that condition being the ability to patch safely.
When there was enough information on the updates to determine where the problems lay, Woody changed the DEFCON number. He usually waited till the Preview was released to see what MS had fixed. And it was usually preceding a weekend that DEFCON was changed, in order to have the off-time to do the updating. But it was not set to a specific day.
Woody has retired, and this is Susan’s decision now. The problems that exist with Nov updates are pretty much known and there have not been a bunch of new ones appearing. So it seemed a good time, with the US holiday long weekend off-time, to give the go-ahead. More time for those supporting family and friends to help with the updating.
But DEFCON has never been a rigid schedule that has to be done on a given day, or not at all. It is meant as a guideline, to indicate that the problems with a particular set of updates are mostly known and, given that knowledge, installing that set of updates is relatively safe.
(Notice I don’t use the absolute where MS is concerned. 🙂 )
-
-
-
-
-
December 27, 2020 at 9:31 am #2323027
Jasmo1046
AskWoody Plus-
December 27, 2020 at 11:52 am #2323035
Bob99
GuestThe best answer at this time with no hints from Susan yet is “we’ll see”. My guess is that we’ll see the DEFCON go to either 3 or 4 this week or next, so you’ll be OK with your delay if the DEFCON level is changed this week. If not, you can always hit “Pause updates” one more time to give yourself another 7 days’ delay.
The December patches were released on the 8th, so 25 days gives you, as you say, till the 2nd of January, after which you should be offered the December updates by Windows Update. If you’ve been able to follow the guidance in AKB 2000016, you should be set up so that Windows Update merely informs you that the updates are available but does not install them until you click the “Download” button.
If you haven’t taken the time to look through the article, perhaps this might be a good time to read through it, keeping your own installation in mind, as AKB 2000016 covers both Windows 10 Home and Windows 10 Pro editions and versions from 2004/20H2 through those from 1909 and earlier.
We have until January 12th to install the December updates, as that’s when MS will release the January updates.
-
December 27, 2020 at 12:17 pm #2323056
PKCano
ManagerIf you used Pause, click the Pause again for another 7 days.
If you are using Deferrals, change it to 30 days to give you 5 more.If you set the maximum Pause and you are running out, read through this thread:
There is a way to cheat Pause
-
-
-
AuthorPosts
Viewing 5 reply threads -
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search The Lounge
Recent Replies
Susan Bradley on Susan recommending version 2004
Just nowCharlie on Firefox 85 released
4 minutes agoGuest on Firefox 85 released
6 minutes agoSusan Bradley on Susan recommending version 2004
7 minutes agoGunny on Susan recommending version 2004
18 minutes agoPKCano on Comments on AKB 2000016: Guide for Windows Update Settings for Windows 10
49 minutes agob on Comments on AKB 2000016: Guide for Windows Update Settings for Windows 10
1 hour, 3 minutes agob on Comments on AKB 2000016: Guide for Windows Update Settings for Windows 10
1 hour, 22 minutes agoCADesertRat on Susan recommending version 2004
1 hour, 23 minutes agoWCHS on Comments on AKB 2000016: Guide for Windows Update Settings for Windows 10
1 hour, 51 minutes agoMoonshine on Firefox 85 released
1 hour, 58 minutes agosatrow on Firefox 85 released
1 hour, 58 minutes agoNASAndSlow on Very slow and erratic data transfer to and from NAS used for backup
2 hours, 8 minutes agoNoLoki on Mozilla Thunderbird Update
2 hours, 23 minutes agoPaul T on Orange screen, white stripes, not using Bitlocker
2 hours, 25 minutes agoPaul T on Firefox 85 released
2 hours, 27 minutes agoPaul T on Excess heat during laptop recharging?
2 hours, 33 minutes agoanonymous on Orange screen, white stripes, not using Bitlocker
2 hours, 47 minutes agoanonymous on Paying for 0Patch Using PayPal
2 hours, 55 minutes agoram5thwheel on Windows 10 v2004 wants patch KB4023057
3 hours, 5 minutes agoSave_Us_from_MS on Excess heat during laptop recharging?
3 hours, 33 minutes agodmitriy1980 on Hard Drive at 100% usage
3 hours, 48 minutes agogeekdom on Schrödinger’s Bill
4 hours, 28 minutes agoAlex5723 on Firefox 85 released
9 hours, 36 minutes agoAlex5723 on iOS/iPadOS and WatchOS Updates
9 hours, 54 minutes agoOscarCP on Websites that still require Flash after EOL
10 hours, 51 minutes agoAlex5723 on Zero day Windows 10 bug
10 hours, 53 minutes agoSusan Bradley on mat-debug-####.log
10 hours, 56 minutes agoanonymous on mat-debug-####.log
10 hours, 57 minutes agoanonymous on mat-debug-####.log
10 hours, 57 minutes ago
Recent Topics
-
Guys, what antidetect do you use? I really need your help (Awaiting moderation)
27 minutes ago
-
Guys, what antidetect do you use? I really need your help M (Awaiting moderation)
33 minutes ago
-
Emotet malware disrupted
1 hour, 7 minutes ago
-
Windows 10 v2004 wants patch KB4023057
3 hours, 6 minutes ago
-
Windows Feature Experience Pack 120.2212.2020.0 released to BETA channel
3 hours, 20 minutes ago
-
You should update your iDevice now
15 hours, 43 minutes ago
-
How to find the most recent transaction date of a unique item
20 hours, 17 minutes ago
-
Mozilla Thunderbird Update
2 hours, 24 minutes ago
-
Can’t install program on 2004 build
21 hours, 50 minutes ago
-
Outlook on Vista
1 day ago
-
Latest increase in no. of Win 10 services
1 day, 1 hour ago
-
Outlook 365 – Title bar – Folder Name
21 hours, 8 minutes ago
-
Office 365 Outlook getting rejected by some servers
1 day, 8 hours ago
-
Firefox 85 released
5 minutes ago
-
Video & Sound Cards ?
1 day, 18 hours ago
-
newsd process on Big Sur downloading MASSIVE amounts of traffic
2 days ago
-
No bootable device (sometimes!)
2 days, 1 hour ago
-
email providers
2 days, 2 hours ago
-
Legacy Teams Client Download
2 days, 2 hours ago
-
Accidentally hit “Pause Updates” , now what?
1 day, 22 hours ago
-
My neighbours’ media devices
1 day, 12 hours ago
-
Links not working in some e-mails
1 day, 7 hours ago
-
Excess heat during laptop recharging?
2 hours, 34 minutes ago
-
Hackers are running your smart home
1 day, 21 hours ago
-
Freeware Spotlight – Immunet 7
1 day ago
-
Schrödinger’s Bill
4 hours, 28 minutes ago
-
Sorting alphanumeric text
1 day, 9 hours ago
-
Potential for iPhone 12 and MagSafe to Interfere With Medical Devices
2 days, 5 hours ago
-
Computer running slowly when using Wi-Fi since last Windows update
22 hours, 38 minutes ago
-
Websites that still require Flash after EOL
10 hours, 52 minutes ago
Search for Topics
Recent blog posts
Key Links
Copyright © 2004 – 2021 AskWoody Tech LLC. All rights reserved.